Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F7AE9EC8348461FB13729C27DEF19CCDA5CE93063E2E7CF4F54CDE2905A64/0/34352e3137362e39322e302f32322d3234203d3e20323637383435.roa
File:                     34352e3137362e39322e302f32322d3234203d3e20323637383435.roa (raw, json)
Hash identifier:          oDnr09UgDs7KuXy/dP1BjfnvPRrsYkU+3TPW7xDYWSA=
Subject key identifier:   70:E4:56:FB:C3:24:CE:29:EC:C9:1A:47:86:58:5E:43:7C:A0:B9:B8
Certificate issuer:       /CN=D6747CEA07291D5F71FA45A86A646B8833E8F3B5
Certificate serial:       17EC7ABD0CB878754DB171ADAB7968227804C9F5
Authority key identifier: D6:74:7C:EA:07:29:1D:5F:71:FA:45:A8:6A:64:6B:88:33:E8:F3:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6747CEA07291D5F71FA45A86A646B8833E8F3B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F7AE9EC8348461FB13729C27DEF19CCDA5CE93063E2E7CF4F54CDE2905A64/0/34352e3137362e39322e302f32322d3234203d3e20323637383435.roa
Signing time:             Tue 04 Feb 2025 18:46:31 +0000
ROA not before:           Tue 04 Feb 2025 18:41:31 +0000
ROA not after:            Tue 03 Feb 2026 18:46:31 +0000
asID:                     267845
IP address blocks:        45.176.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ec:7a:bd:0c:b8:78:75:4d:b1:71:ad:ab:79:68:22:78:04:c9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6747CEA07291D5F71FA45A86A646B8833E8F3B5
        Validity
            Not Before: Feb  4 18:41:31 2025 GMT
            Not After : Feb  3 18:46:31 2026 GMT
        Subject: CN=70E456FBC324CE29ECC91A4786585E437CA0B9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:39:49:fe:fb:4a:1b:ed:9b:ec:0c:d0:74:
                    e1:eb:6e:fe:1c:bd:8a:7d:aa:ea:40:8b:80:49:17:
                    b6:a6:2a:1e:d6:d3:07:26:51:50:f3:5d:e1:05:b3:
                    43:ed:ab:2d:8b:a1:45:8d:99:9e:ab:3b:62:23:94:
                    ba:77:51:87:09:6e:91:dc:18:ce:6c:ef:de:c7:21:
                    f8:e4:03:f7:e1:43:51:a0:c8:1a:58:19:68:4c:da:
                    ce:86:b2:9b:73:a6:8e:43:34:93:d6:4e:8e:fb:b5:
                    c6:15:a1:96:c0:32:e0:52:30:99:fe:3e:4a:2f:0e:
                    c0:62:0a:ce:73:ab:b9:a8:24:b8:f5:46:7f:50:85:
                    c8:fb:10:b8:85:eb:c8:93:13:8b:8b:9f:84:c2:8f:
                    af:d1:d6:c2:b5:6e:3e:27:4b:4f:d6:ec:4b:81:eb:
                    74:9f:b9:cb:35:ea:f4:1f:eb:d7:be:90:d8:f0:68:
                    87:59:11:4f:5e:c3:b7:21:1d:c0:ca:94:39:2e:72:
                    83:de:8e:da:9b:4f:fc:92:0b:38:bb:b1:ba:6d:e8:
                    46:03:85:0c:6a:9d:7f:d2:33:68:b7:18:7a:4b:c5:
                    14:f9:8c:00:d6:2a:27:42:e9:64:5a:a1:02:e9:76:
                    8f:86:65:e4:bd:1c:20:57:9c:f9:31:41:bc:96:09:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E4:56:FB:C3:24:CE:29:EC:C9:1A:47:86:58:5E:43:7C:A0:B9:B8
            X509v3 Authority Key Identifier:
                keyid:D6:74:7C:EA:07:29:1D:5F:71:FA:45:A8:6A:64:6B:88:33:E8:F3:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F7AE9EC8348461FB13729C27DEF19CCDA5CE93063E2E7CF4F54CDE2905A64/0/D6747CEA07291D5F71FA45A86A646B8833E8F3B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6747CEA07291D5F71FA45A86A646B8833E8F3B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F7AE9EC8348461FB13729C27DEF19CCDA5CE93063E2E7CF4F54CDE2905A64/0/34352e3137362e39322e302f32322d3234203d3e20323637383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:5f:a6:3d:da:7e:53:d3:47:5c:74:d0:d5:70:aa:ad:01:0a:
         da:59:1d:53:04:5a:da:16:58:ac:8d:ea:6b:93:f0:88:b0:fb:
         c8:34:5f:bc:c6:97:95:c0:4a:ee:5a:f4:d8:b9:81:7a:7f:a6:
         9b:0a:07:9a:a6:81:ea:b3:f4:04:27:00:e7:28:04:63:e5:93:
         5f:aa:f0:e0:c0:dd:72:a8:f3:3e:f9:7c:3c:04:ba:ad:f2:a1:
         7c:7e:79:46:ec:14:94:da:a9:7d:5c:77:ce:bf:5c:20:19:b9:
         f3:09:23:da:92:fd:50:25:c3:18:11:3d:71:f9:f7:7b:99:d6:
         bf:7e:51:d3:bf:a1:d2:64:14:88:45:97:1c:dc:77:8e:e1:32:
         5c:8b:c3:f4:0a:74:b4:10:b5:36:6b:6e:13:3d:8d:82:e5:32:
         fc:ed:d4:88:52:5a:26:5f:0a:06:44:11:04:96:bb:56:be:e6:
         ef:13:0a:ab:f6:75:79:d1:c2:f4:4f:95:56:d4:62:50:9e:6a:
         1b:74:e8:92:98:d1:dd:b8:50:e2:a2:ec:6b:1a:c3:b2:87:d9:
         ce:23:cc:d4:a3:a0:b4:14:d0:03:95:11:8d:43:f9:59:29:33:
         0f:70:18:c5:44:be:ef:80:f8:e2:28:7c:86:02:9e:ca:90:c5:
         e0:97:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:53 2025 by rpki-client